Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/FEAXeffTu2icHJMUTnHRgSMzoXM.roa
File: FEAXeffTu2icHJMUTnHRgSMzoXM.roa (raw, json)
Hash identifier: k7UhYOIyaJpLQcnLPRjbEWpTe1qNlj84bbQKW/lYH4c=
Subject key identifier: 14:40:17:79:F7:D3:BB:68:9C:1C:93:14:4E:71:D1:81:23:33:A1:73
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C54087F6A82E8C5A07D0E7447957AD8
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/FEAXeffTu2icHJMUTnHRgSMzoXM.roa
Signing time: Sun 01 Jan 2023 07:55:24 +0000
ROA not before: Sun 01 Jan 2023 07:55:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141159
IP address blocks: 185.142.143.0/24 maxlen: 32
185.182.49.0/24 maxlen: 32
185.133.195.0/24 maxlen: 32
185.182.48.0/24 maxlen: 32
185.236.83.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:08:7f:6a:82:e8:c5:a0:7d:0e:74:47:95:7a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14401779f7d3bb689c1c93144e71d1812333a173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a5:87:a7:84:8c:7c:bc:2b:e4:f2:f1:3c:e1:
1a:10:80:b1:ab:70:92:0b:49:66:27:e1:f9:b4:d8:
4d:2f:3f:bb:bd:7f:74:f7:05:6b:8f:58:e3:a1:b3:
a8:05:66:f0:1f:28:93:65:03:fd:ab:e4:5c:53:15:
2d:da:80:7b:3b:63:b1:9d:90:f7:3d:a9:fc:b0:01:
96:19:9b:34:6b:5c:d1:96:fe:08:11:db:ff:ef:d2:
aa:aa:fe:11:86:cd:37:b9:a8:f4:16:54:5a:bb:c9:
88:b0:2d:7b:c2:b5:43:50:47:b8:42:09:03:b5:88:
90:f3:39:b6:c9:23:84:5f:3e:22:a7:dd:2c:d0:ec:
e2:22:a2:39:ad:7d:b5:9e:42:f7:85:28:72:3a:2f:
e3:88:f8:4b:fc:42:71:4d:b1:9c:42:95:08:e5:16:
91:ef:14:79:13:fc:14:40:39:7c:93:d1:21:0f:e1:
2f:04:a5:54:9f:0f:4c:c3:77:ce:97:81:5f:a4:58:
5d:a4:98:db:08:bc:8d:28:18:02:a1:f5:96:6f:e3:
e4:23:0f:df:5a:a3:44:ac:d7:63:82:f3:a4:22:4e:
de:d9:b7:0b:b4:69:8a:fe:38:d6:3b:ce:be:a1:a8:
ea:62:ea:56:10:a2:a0:a7:36:51:c0:38:28:08:f4:
a7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:40:17:79:F7:D3:BB:68:9C:1C:93:14:4E:71:D1:81:23:33:A1:73
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/FEAXeffTu2icHJMUTnHRgSMzoXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.195.0/24
185.142.143.0/24
185.182.48.0/23
185.236.83.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:df:aa:c3:22:00:c0:b4:09:a7:bf:88:f5:f4:e8:03:4c:50:
8a:f7:af:fd:61:01:b0:99:c1:61:27:cb:43:16:5a:f2:48:05:
c0:9e:0d:85:ab:85:d1:8d:0a:a8:12:e9:49:1e:a6:a4:f7:83:
9c:58:ca:06:c9:2a:a1:91:e0:32:98:dd:60:1a:ef:b2:83:3a:
28:0a:ca:c8:31:b5:86:7a:42:66:2d:dd:61:38:28:5c:11:15:
1a:b3:65:1c:63:aa:fc:f7:be:17:17:86:76:5c:5b:a3:92:6a:
eb:80:42:3c:2f:72:b1:87:b9:c5:5c:00:bf:4b:e9:1a:12:7b:
b3:2c:db:22:ef:c3:87:1f:cb:9d:27:0c:48:34:5e:f9:25:82:
de:7b:1a:3d:fe:bf:12:d3:9c:a7:b9:c7:79:f2:3f:33:38:41:
16:36:98:4d:79:73:e0:80:d1:bf:8a:39:f4:a3:e4:88:48:d2:
8e:1f:ce:f6:61:80:7a:7d:fe:75:9a:d6:3c:a0:2a:b0:c8:05:
4b:8d:95:d7:54:f5:c3:cc:45:86:87:e2:ef:08:08:ee:61:e5:
a6:76:8a:79:d4:dd:5c:84:26:27:da:6b:4a:f5:b2:31:45:d0:
14:da:d4:4c:4f:04:f9:43:d0:ca:36:72:ce:a5:5e:5e:e8:84:
61:be:00:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org